I dont have DKIM senderid spf and Im not blocked :-)

Post #313,384 by boxley 9/1/09 7:38:42 PM Reply	I dont have DKIM senderid spf and Im not blocked :-) per rfc dkim an unsigned mail is no different than a signed mail. No reputation is accrued because you sign with dkim successfully. 1/2 of the spam we receive is successfully dkim signed.
Post #313,386 by folkert 9/1/09 7:55:37 PM Reply	Yes, I understand that Bill. But NO SPF record adds 2-3 points to your spam score (taking only a "5" to qualify) is seriously not worth NOT having one (being the default neutral). Having a "-all" and mail coming from your domain that IS NOT from allowed addresses (being a negative return) adds 3-5 points to spam scores (but not plus the 2-3 for no record). This mean you can reduce mail spam scores from your real mail servers by 2-3 points, plus add 3-5 points to fakers. DKIM and SenderID are not ideal solution anyway. DKIM is easy to implement and publish the public keys so... spammer use it AND SPF. Also using the "-all" at the end of your SPF record says ONLY THESE IP/HOSTs are authorized to send mail for your domain. Most places use SPF as another tick mark against depending on the outcome (neutral or negative/not-authorized). Having an SPF record proper gives YOUR mail a much better chance of getting through. Now the Spammers that are properly signing and publishing stuff... you have a real target to go after then. They can and are seriously blacklisted, no amounts of SPF or DKIM will truly overcome the SPAM additives in the scoring engines.
Post #313,388 by boxley 9/1/09 8:27:33 PM Reply	Re: Yes, I understand that Bill. you must be talking about corporate antispam rules. An ISP has to be much more lenient as the customer has decided that ISP delivers mail to them so unless it is a phish pharm or balatant spam is should be delivered to the in box on the off chance the customer wants it. If you dont think that is true put 10 geeks in a room and let them discuss mail from the edge and you will sure see a lot of disparate interests. SPF is implemeted broken in so many places it is almost useless to derive much reputation from that. Now you have legitimate hosters like hotmail business services that use large data centers world wide natted behind a few IP addresses that compound the problem. Corporate antispam is easy peasey. For a large ISP not so much as the false positive rate has to be kept low while still offering protection to its customers

Welcome to IWETHEY!